CVEvulnerability
CVE-2017-16887
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-275
Description
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.
Affected configurations
• fiberhome lm53q1 firmware vh519r05c01s38
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2018/Jan/28 Mailing List, Third Party Advisory
- https://www.exploit-db.com/exploits/43460/ Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2018/Jan/28 Mailing List, Third Party Advisory
- https://www.exploit-db.com/exploits/43460/ Exploit, Third Party Advisory, VDB Entry